Little to no budget is available for hiring new staff for the IT service desk. What is the ideal method of sourcing knowing that little time is available?
Answer(s): C
Given the constraints of little to no budget and limited time, internet job boards are the ideal sourcing method. They are cost-effective (often free or low-cost), allow quick posting of job openings, and reach a wide pool of candidates, enabling rapid hiring. Word of mouth (A) is informal and may not yield qualified candidates quickly. Internal IT staff based on SWOT analysis (B) is not a standard recruitment method and takes time to analyze. Recruitment agencies (D) are expensive and slower due to their processes, making them unsuitable for low- budget, urgent hiring.
EPI CITM study guide, under IT Organization, likely discusses recruitment strategies for IT staff, emphasizing cost-effective methods like job boards. Check sections on human resource management or staffing.
A technical team investigating possible controls concludes that the most preferred control cannot be implemented as a result of too many constraints and decides to propose the second-best control.How is this control being referred to?
Answer(s): B
A compensating control is an alternative control implemented when the preferred control cannot be applied due to constraints (e.g., technical, financial, or operational). According to frameworks like COBIT or ISO/IEC 27001, compensating controls provide equivalent or partial risk mitigation when the primary control is infeasible.Deterrent controls (A) discourage violations, detective controls (C) identify incidents, and corrective controls (D) address issues after they occur. Only compensating control (B) fits the scenario of a second-best alternative due to constraints.
EPI CITM study guide, under Information Security Management, likely discusses control types, referencing compensating controls in risk management frameworks. Refer to sections on security controls or risk mitigation.
Lately, the support desk is receiving several requests for password resets from individuals who appear to be unknown to the organization. Possible criminal activities are suspected, and the organization wishes to address this issue in their information security awareness program. What is the area that requires awareness?
Answer(s): D
Requests for password resets from unknown individuals suggest social engineering attacks, such as phishing or impersonation, where attackers manipulate users to gain unauthorized access. An information security awareness program should focus on educating staff about social engineering tactics to recognize and prevent such incidents.E-mail usage (A), instant messaging (B), and internet usage (C) may be vectors for attacks, but the core issue is social engineering, which encompasses tactics used across these channels.
EPI CITM study guide, under Information Security Management, likely emphasizes social engineering in security awareness training. Refer to sections on security awareness or threat management.
Being part of service management, business relationship management follows the principles of the service lifecycle. Which of the below is not part of activities defined in service operation?
In ITIL, the service operation phase focuses on delivering and managing services, including activities like communicating scheduled outages (A), reporting service performance (B), and handling escalations (C). Defining service strategy (D) is part of the service strategy phase, not service operation, as it involves planning and aligning services with business goals.
EPI CITM study guide, under Service Management, likely references ITIL's service lifecycle, specifically distinguishing service operation from service strategy. Check sections on ITIL service operation or business relationship management.
From the list below, which activity is not considered to be an activity in the software development phase?
In the Software Development Life Cycle (SDLC), the development phase typically includes code writing (A), testing (B), and documenting (C) to build and verify the software. Implementation (D) is part of the deployment phase, where the software is installed and made operational in the production environment, not part of development.
EPI CITM study guide, under Application Management, likely covers SDLC phases, distinguishing development from implementation. Refer to sections on software development or application lifecycle management.
Post your Comments and Discuss EXIN CITM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CITM content, but please register or login to continue.